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Abstract 

We study the j-invariant of the canonical lifting of an elliptic curve as a Witt 
vector. We prove that its Witt coordinates lie in an open affine subset of the j-line 
provided that the characteristic is at least 5 and deduce the existence of a universal 
formula for the j-invariant of the canonical lifting. It is also proved that a similar 
result holds for p = 2,3 if we replace the j-line by some radiciel extension of it. 
The canonical liftings of the elliptic curves with j-invariant and 1728 over any 
characteristic are also explicitly found. 



1 Introduction 



Let k be an algebraically closed field of characteristic p and W(k) be the ring of p-typical 
Witt vectors of k. Let E be an ordinary elliptic curve over k. A consequence of the Serre- 
Tate theorem is that up to isomorphism there exists a unique elliptic curve E over W(k) 
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satisfying some certain conditions whose reduction modulo p is isomorphic to E. Through- 
out the paper we will give the definition and other properties of the canonical lifting. By 
definition, the j-invariant of E, denoted by j(E) G W(k) depends only on the j-invariant 
of E, say jo- If we se t ^ ord = {jo G k\ elliptic curves with j-invariant jo are ordinary}, we 
can define the following function; 

e-.k ovd — > w(k), 

jo 1 — > j( E ) = (jo,ji,--) 

where E is the canonical lifting of E and each ji is a function of jo- The question of finding 
the canonical lifting in this form was first given in [7]. Here we will prove the following 
theorem. 

Theorem A. Let J be an indeterminate and p be any prime. Let <f) p (J) denote the Hasse 
polynomial, i.e. the polynomial in F p [J] whose roots are the supersingular j -values in 
characteristic p. Let 



R = ¥ p 



J, 



R' = R[{J 1/pn U 



J(J - 1728)0 P (J)_ 

(i) There exist /j G R' for all i G Z>i such that for any j G k ord \ {0, 1728}, 

@(jo) = (jo, A (jo), /2(jo), -/nO'o), •••) 

where we see G R' as the unique homomorphism f] : R' — > ¥ p extending the 
F p -algebra homomorphism 

R — > E7, J^j . 
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(ii) If p > 5, then /j G R for all i G Z>i. 

(iii) If jo = is an ordinary j -value then 0(0) = (0,0,0...), and similarly if jo = 1728 is 
an ordinary j -value then 0(1728) = (1728,0,0,...). 

The first and the second assertions of the theorem mean that we have a universal 
formula for the j-invariant of the canonical lifting, and if p > 5 then this universal formula 
is almost a polynomial. The third assertion is independent of the others and proved with 
a different argument. 

We proceed as follows. In §2 we give a brief overview of the Serre-Tate theorem. In §3, 
we generalize the notion of the canonical lifting for elliptic curves defined over F p -schemes 
satisfying certain hypotheses. In §4 we use the construction given in [5j to prove that the 
canonical lifting of an ordinary elliptic curve over an imperfect field of characteristic p > 5 
is defined over the Witt ring of this imperfect field. This result first appeared in [2], but 
here we give a different proof. Finally in the last section we apply the results of §3 and §4 
to a universal family of ordinary elliptic curves to prove (i) and (ii) of Theorem A. We also 
prove (iii) in this last section. 

We fix the following notation. For any schemes X/T and U/T we set Xy := X x x U. 
If U = Spec C is affine, we may use Xc instead of Xjj- If T — Spec B is also affine, we may 
also use X ®b C for Xjj. For t G T with residue field n(t), we denote Xx T Spec/t(t) by 
X t . For any group scheme G/T, G[N] denotes the kernel of the multiplication by iV on G. 
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2 An overview of the Serre-Tate theorem 



In this section we briefly recall some aspects of the Serre-Tate theorem. We restrict our- 
selves to the definition and a well known equivalent characterization of the canonical lifting 
which are directly used in the proofs. General references for a complete proof and a de- 
tailed analysis of the Serre-Tate theorem are [5] and [8]. For the sake of completeness we 
quote the following theorem from [5] and call it as the general Serre-Tate theorem. 
Theorem. Let A be a ring in which p is nilpotent. Let I be a nilpotent ideal of A, and put 
A = A/I. Let AS (A) denote the category of abelian schemes over A, and let Def(A,A ) 
denote the category of triples (Xo,L,e) where Xq is an abelian scheme over Aq, L is a 
p-divisible group over A and e : L := L ®^ A — > Aq[p°°] is an isomorphism. Then the 
functor 

X i — y (Xq, X[p°°], the natural map) 

is an equivalence of the categories AS (A) and Def(A, A ). 

Let k be an algebraically closed field of characteristic p > and A be an Artin local 
ring with residue field k. In general we say that a scheme X — y Spec A lifts a given scheme 
X — y Spec k, if X cg)^ k X. Given an ordinary abelian variety X over k, the Serre- 
Tate theorem classifies all abelian schemes defined over A that lift X. For such an ordinary 
abelian variety X — y Speck and an abelian scheme X — 7-SpecA lifting X/k, there are 
the associated p-divisible groups (= Barsotti-Tate groups) denoted by X[p°°] and X[p°°] 
respectively which play an important role summarized in the following diagram; 
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{Isomorphism classes of 1L/A lifting X/k} ^> 

{Isomorphism classes of X[p°°]/M. lifting X[p°°}/k} ^> 

Ext A (T p (X)(k) ® Q p /Z p ,Rom Zp (T p (X D )(k),G m ) ^ 
Rom Zp (T p (X)(k) ® T p (X D )(k),G m (A)), 

where T p (X)(k) is the Tate module of X, X D denotes the dual abelian variety, G m denotes 
the formal completion of the multiplicative group G m and Ext^— , — ) denotes the extension 
group of A-groups. General references for the properties of p-divisible groups are [H] and 
[8]. The above diagram shows that the set 

{Isomorphism classes ofX/A lifting X/k} 

has a natural group structure. 

Definition. With the above notation the unique abelian scheme "K/A which corresponds to 
the identity element of the group 

Ext A (T p (X)(k)®Q p /Z p ,Rom Zp (T p (X D )(k),G m )) 

is called the canonical lifting of X/k over A. 

Remark. In the introduction, the base of the canonical lifting is given to be a characteristic 
zero integral domain, but here we define it over an Artin local ring which indeed fits well 
to our purposes. At the end of this section we will see that this definition is justified. 
Remark 1. If we only assume that k is perfect than the above diagram and the definition 
still remain valid by a slight change of the objects involved. A complete study of equivalent 
definitions of the canonical lifting for perfect k can be found in [8, V.3 and the Appendix]. 
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Equivalently the canonical lifting of Xj k over A can be denned as the unique abelian 
scheme with a trivial "Serre-Tate (/-parameter" 

q{= Ox/a) E Rom Zp (T p (X)(k) <g> T p (X D )(k),G m (A)). 

We will use this fact in §4, but first we need to manipulate it to be able to use in the way 
we want. Again the details can be found in [5]. Let / be the maximal ideal of A and r be 
a sufficiently large integer such that I r = 0. Let H/A be any lifting of X/k. Then we have 
the following perfect pairing 

E x :±xT p (X D )(k) -^G m . 

and the homomorphism 

r :X{k)\p r ] — ► ±{A) 
P i— ► p r (P) 

where P £ X(v4) is any lifting of P. Also the composition (fix : T p (X)(k) -» X(k) — > ~K(A) 
is well-defined, i.e. <p r is compatible with the map p : X(k)[p r+1 ] — > X(k)[p r ]. Then 
Q = Qx/a is defined as q(a, (3) := Ex{4>x{&), 0)- Since the pairing Ex is perfect, g is trivial 
if and only if 0x is identically equal to the identity element of the group X(A), say O. 
This is equivalent to saying that p r (P) = O for any P £ X(k)[p r ]. If in addition X is 
an elliptic curve, then X = X D and the group X[p r ](k) is cyclic, so it is enough to show 
that p r {P) = O for some generator P £ X(k)[p T \. Hence we have the following equivalent 
condition for "K/A to be the canonical lifting of X/k: 

For some generator P £ X[p r ](k) and for some P £ X(A) lifting P, p r (P) = O. (2.1) 
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The particular case we are concerned with here is the case where A = W n (k), the ring of 
p-typical Witt vectors of length n. Recall that if k is a perfect field of characteristic p then 
W n (k) is an Artin local ring with residue field k and maximal ideal (p). See [9] for the 
definition and basic facts about Witt vectors which we use here. In this case the canonical 
liftings X m /W m (k) are compatible with each other, i.e. for any m < n, 

X„ ®w n {k) W m (k) ^ X m . 

Thus the inverse system (X m /W TO (fc)) m defines a formal abelian variety over W(k) which 
can be algebraicized ([8], §V.3.3). This abelian variety is defined as the canonical lifting 
of X/k over W(k), and hence justifies our definition above. If there is no confusion about 
the base we will just say the canonical lifting of X/k. 

3 Canonical lifting of families 

In this section we will show that we can extend the definition of the canonical lifting 
to elliptic curves defined over F p -schemes under some hypothesis. This will allow us to 
mention about the canonical lifting of a family of elliptic curves. Main result of this 
section is Theorem B which is stated and proved at the end of this section. 

Let R be a Noetherian integral F p -algebra with fields of fractions K. We fix an 
algebraic closure of K, and denote it by K. Let K' be the perfect closure of K (i.e. the 
maximal purely inseparable extension of K) in K and R' be the integral closure of R in 
K' . We also define the subrings 

R n = RVp n = {xe K\x pn G R}. 
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Note that R n is Noetherian, and R' = U n R n and the morphism of schemes Speci?' — > 
Spec R induced by the inclusion R e — >■ R' is a homeomorphism. If s' G Spec i?' maps to 
s GSpeci? then k(s') is the perfect closure of k(s) [3]. Let E/R be an ordinary elliptic 
curve in the sense of [6j §2 and §12]. Then Zariski locally on SpecR, E/R will have a 
Weierstrass equation 

y 2 + a\xy + a 3 x = x 3 + a2X 2 + a^x + a 6 . 

Explicitly there is an open affine cover {U a } a &i of Speci? such that each elliptic curve 
E X-specR U a has a Weierstrass equation with coefficients in T{U a ,Ojj a ) [6, §2.2]. Let E n 
be the scheme defined as 

y 2 + {a^xy + (a 3 )^x = x 3 + {a 2 f^x 2 + (a^x + (a^ 

Zariski locally on Speci?„. Then E n is an elliptic curve, and indeed E n — > E®nR n where 
the base change is done via the p n -th root homo morphism R — > R n . Throughout this 
section E/R and E n /R n will always denote these elliptic curves defined here. To simplify 
notation we use E also to denote the base extensions E cg)^ R n and E cg)^ R' where i is 
the inclusion map. 

Now let T be the spectrum of a field or a complete Noetherian local ring. Then 
for any finite locally free group scheme G/T, there is a unique exact sequence with some 
certain universal properties 

— > G° — > G — ► G et — >■ 

called the connected- etale sequence of G |10j . A similar construction for p-divisible groups 
also exists. If G = (G n , i n ) n is ap-divisible group, then G° := i n ) n and G et := (G^, i n )n 
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are connected and etale p-divisible groups respectively. By [TT] we have an exact sequence 
of p-divisible groups 

— > G° — > G — > G et — > 0. 
Note that for any ordinary elliptic curve E over a perfect field F, the sequence 

— )• E[j9°°] — )• £[p°°] — )• E{p°°} et — > 

splits over F. This fact is very crucial in the construction of the canonical lifting (Recall 
Remark [Q. So in order to generalize the notion of the canonical lifting we need a similar 
result when F is replaced by another scheme. But a priori we don't even know that i?[p°°] 
has a connected- etale sequence over an arbitrary base. The following theorems of Messing 
which we directly quote from [8] and the Proposition [1] below allow us to overcome this 
problem. 

Theorem 1. Let S be any scheme and f : X — > S be a finite locally free morphism of 
schemes. Then the function s i — > (separable rank of X s ) is locally constant on S if and 
only if there are morphisms i : X — > X' and f : X' — > S which are finite and locally 
free with i radiciel and surjective, f etale and f — f o i. The factorization is unique up 
to unique isomorphism and is functorial in X/S . 

Proof. §11.4.8]. □ 

Theorem 2. Let S be a scheme on which p is locally nilpotent, and G be a p-divisible 
group over S . Then the following conditions are equivalent. 

1. G is a p-divisible group over S (For the definition of G, see |2l %!!])■ 

2. G is an extension of an etale p-divisible group G et by a connected p-divisible group 
G°. 
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3. G is an extension of an etale p-divisible group G et by a p-divisible formal Lie group 

r. 

4- For all n, G[p n ] is an extension of a finite etale group by a finite locally free radiciel 
group. 

5. G{1) is an extension of a finite etale group by a finite locally free radiciel group. 

6. The function s i — > (separable rank of G[p] s ) is locally constant on S. 

Proof. [8, §11.4.9] □ 

Proposition 1. Let E[p n ] denote the kernel of p n : E — > E and E\p°°] be the p-divisible 
group of E. 

(i) For each n there is a unique connected- etale sequence 

— ► E[p n ]° — ► E[p n ] — ► E[p n ] et — ► 

which splits over R n . 

(ii) There is a unique connected- etale sequence of p-divisible groups 

o — ► Eip 00 } — >• Eip°°] — >• E[p°°] e * — ». o, 

which splits over R' . 

Proof. By hypothesis is ordinary so the p-divisible group G = Elp 00 ] satisfy the last 
condition of Theorem [2j and the existence of both sequences follow. Recall the notation 
we adopted for E, i.e. we can take the base to be R, R n or R' and so we have the relevant 
connected- etale sequences over any of these bases. But by the uniqueness assertion of 
Theorem [1] these sequences are compatible with each other in the sense that E^[p n }° = 
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(E[p n ]°)Ft' and similarly for other groups and the other base R n . Thus the uniqueness of 
the sequences in the theorem also follow. 

The remaining thing is to prove the splitting of the sequences over the specified bases. 
First note that the splitting of the sequences given in (i) for all n imply the splitting of the 
sequence given in (ii). Thus we only need to show that 

— ► E[p n ]° — ► E\p n ) — ► E[p n ] et — >• 

splits over R n . Also the groups involved here are all commutative, so splitting amounts to 
giving a section of E[p n ] — > E[p n ] et over R n . 

Let F n : Spec R n — )-Spec R n be the n-th iterate of the absolute Frobenius of Spec R n . 
Then we have 

E^ := E n ® Rn ^ R n = E ® RA R n {= E). 

To simplify notation we use F n also to denote the n-th iterate of the relative Frobenius 
of E n ; F n : E n — > En ■ We denote the dual isogeny of F n by V n . Then we have the 
following commutative diagram 




which shows that ker(V™) is a subgroup of E[p n }. But since E is ordinary then ker(V n ) is a 
finite etale group over R n [61 §12.3.6]. The inclusion ker(V n ) E[p n ] will give a required 
section once we can show that ker(V n ) ^> E[p n ] et . Note that this isomorphism holds over 
algebraically closed fields; since then E\p n ] = /i p n x Z/pZ, and V n is the identity on fj, p n 
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and kills Z/pZ. Our aim is to reduce to this case. In general the composition 

ker{V n ) — > E[p n ] — > £[p n ] e * (3.1) 

is a group homomorphism, so necessarily commutes with the action of the etale fundamental 
group (see [10] for the definition of the etale fundamental group). Finally we remark that 
R n is Noetherian for any n. Now the following theorem of Grothendieck completes the 
proof. □ 

Theorem. Let S be a locally Noetherian scheme, a be a geometric point, and n = tt(S, a) 
be the etale fundamental group of S centered at a. Then the functor Y i — > Y(a) establishes 
an equivalence between the category of finite Stale schemes over S and the category of finite 
sets with a continuous it action. 

Remark. The sequence given in (ii) of Proposition [1] also captures the connected- etale 
sequence of the fibre n(s') for any s' G Spec R' in the following sense; 

(£[p~] e % = (£ s ,[p°°]) e < and {E[p™f) s , = (E, s [p^])°. 

Now we will use Proposition (TJ and the general Serre-Tate theorem to find a good 
lifting of E(= Eri) to W m (R') for each m. We will need the following important theorem 
of Grothendieck. 

Theorem 3. Let A be a ring, I an ideal of A. Suppose that A is complete and separated 
with respect to topology defined by the ideal I. Put A = A/ 1. Then the functor 

X i — > X ® A A 

establishes an equivalence between the category of finite etale A-schemes and the category 
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of finite Stale A -schemes. 



Proof, pfl §18.3.2]. □ 

Theorem B. Let R be a Noetherian, integral W p - algebra with perfect closure R' , and E 
be an ordinary elliptic curve over R. Then for each m there exists a unique elliptic curve 
~^m/W m (R') such that for any s' G Speci?' with residue field k(s'), the elliptic curve 

E m <S>w m (R>) Wm («(«')) 
is the canonical lifting of E s > to W m (n(s')). 

Proof. Let m > 2 be a fixed integer. Since R' is a perfect ring, A = W m (R!) satisfies the 
hypothesis of Theorem [3j So for any n there exists a unique group scheme H n over W m (R') 
such that 

H n ® Wm {R>) R' ^ E[p n f- 

It also follows that H n form an inductive system, and so the limit gives a p-divisible group 
Hoc lifting E\p°°] et . Applying Cartier duality to E[p n ] et , we see that E[p n }° and so E[p°°} 
has also a unique lifting to W m (R'). Since the sequence given in (ii) of Proposition CE] 
is split exact, the product x lifts the p-divisible group E\p°°}. 

By the general Serre-Tate theorem there is a unique abelian scheme E m over W m (R') 
lifting E which corresponds to G^ x Hqq , and so has a split exact connected- etale sequence 

— ► E m [p°°] — > E m [p°°} — ► E m {p°°]° — > 0. 

By checking fibers or dimension we can see that E m is indeed an elliptic curve. 

Now by construction for any s' GSpeci?', the elliptic curve E m ®w m {R') W m (K(s')) 
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lifts E„i and the associated p-divisible group 

E m [p°°] ®W m (R>) W m {K{s')) 

has a split exact connected- etale sequence. So ^ m ®w m (R')W m (K(s')) must be the canonical 
lifting of E s >. □ 

For the purposes of this paper we may call the elliptic curve E m as the canonical 
lifting of E over W m (R'). The j-invariant of E m , denoted by j(E m ) will be the universal 
formula for the canonical lifting of the fibers in the following sense: Let 

j(E m ) = (jo, jl, jm-l) 

and let f s i : R' — > n(s') be the canonical map for s' GSpecR'. Then the j-invariant of 
the canonical lifting of E s i to W m (n(s')) is given by 

3 = (fs'(jo),fs(jl),-,fs(jm-l))- 



4 Canonical lifting over imperfect fields 

In this section we will use the condition 12.11 to prove that the base of the canonical lifting 
has a well behaviour with respect to the base of the given ordinary elliptic curve. Explicitly 
we will prove the following theorem. 

Theorem C. Let K be any field of characteristic p > 5, and let E be an ordinary elliptic 
curve over K. Let E be the canonical lifting of E over W(K). We denote the j -invariant 
o/E by j(E) = (jo, ji, j n , ...). Then each j n is an element of K . 
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The theorem holds for perfect K by definition. The interesting thing is that the 
canonicalness imply that it also holds for imperfect fields. This theorem was proved by 
Finotti, L.R.A. in [2] by using Greenberg transforms and elliptic Teichmiiller lifts. Here 
we give a different proof. 

First we make a reduction. Let K' and K s denote the perfect and separable closures 
of K respectively. Then by construction of the canonical lifting j n G K' . Since K'C\K S = K 
it is enough to prove that j n G K s . Thus by changing the base to K s we can assume K to 
be a separably closed field. The condition 12.11 is only about the p-th power torsion points. 
So we may recall and give some basic facts about the division polynomials before we go 
into the proof. A basic reference for division polynomials is [lj. Also we will use some 
basic facts about Witt vectors. The statements which we do not prove here in detail are 
easy consequences of results of [9J §11.4-5]. 

We fix K and E as in the theorem. Fix a Weierstrass model of E/K, 

E :yl = x 3 + a x + b 

where do, &o G K. 

For any odd integer N, let ^e,n{x) be the N -division polynomial, i.e. the polynomial 
in /L[ao,bo,x] whose roots are exactly the ^-coordinates of the iV-torsion points of E(K) 
(For iV even the division polynomial is in Z[ao, bo, x, y\). In other words ^e,n{xq) = for 
some x G K if and only if P = (x ,y ) G E(K) is an iV-torsion point for some y Q G K. 
So the only iV-torsion points which can not be obtained from the roots of *&e,n are the 
points lying in E[N]°(K). Obviously in this case E[N]°(K) consists of only one point, but 
the concept of division polynomials can be generalized for any base and this observation 
remains true pQ. 
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We are interested in the special case N = p n for n > 1. Consider the set 
L n = {ae K\0 ^P=(a,0)e E[p n }(K) for some £ K}. 

Note that \L n \ = (p 2n -l)/2. 

Since K is separably closed we have that either L n C if or if ({L n }) is a purely 
inseparable extension of K. In the first case ^E,p n (x) splits over K, and in the second 
case it is a polynomial in x pl over if for some I. A simple degree consideration shows that 
/ < n, and so a p " £ K for any a £ L n . 

Now take a general Weierstrass equation over the ring of Witt vectors lifting E; 

A : (y ,yi, ...f = (x ,Xi, ...) 3 + (ao,a u ...)(x ,Xi, ...) + (60,61, ...)• 

We can see yi,Xi,a>i, and 6, as indeterminates for % > 1. We may also see this Weierstrass 
equation as an equation in the variables with coefficients in W(F) where F is an 

algebraically closed field containing K and all the indeterminates a« and 6j. So any lifting 
of E can be obtained by choosing a«, 6j £ K for i > 1. The idea of the proof is that we can 
choose aj, 6j £ K in such a way that the obtained nonsingular cubic will be a Weierstrass 
model of the canonical lifting of E. We will prove it inductively on the index i of the 
variables {a iy 6j}. Note that if A is the canonical lifting then A n := A (mod p n ) will be the 
canonical lifting of E over W n (K). 

We introduce the following notation. Fix a positive integer n. Let 
A n+1 : (y Q , ...,y n ) 2 = (x , ...,x n ) 3 + (a , a n )(a;o, ...,x n ) + (6 , ...,6 n ) 
be the reduction of A modulo p n+1 . In [T], Cassels define the division polynomials ^ = \&c,iv 
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for any positive integer N and for any cubic equation 



C : y 2 = x 3 + Gx + H 

where G and H are independent indeterminates. He proves that these division polynomials 
have integer coefficients and satisfy 

(^ 2 )' = (mod N), 

where ()' means the derivative with respect to x. In our case since char(i^) 7^ 2 this means 
that for any odd N, WW G N.W n+ i(F)[x\. We can state this in a different way as the 
following technical lemma. 

Lemma 1. The p n+1 -division polynomial ^ of A n+ i satisfies ty' — in W n+ i(F)[x\. 

Proof. Since p n+1 = in VF„ + i(F)[x], ^' 7^ implies that * is a zero divisor in the 
polynomial ring W n+ i(F)[x]. This can happen only if there exists a nonzero B G W n+1 {F) 
such that B^> = 0. But by construction \l/(mod p) = \t* 'e, p »(x) is not identically zero. Thus 
coefficients of some terms of \I> are nonzero modulo p, i.e. units in W n+1 (F). So B^> = 
can occur only if B = 0. Thus \& can not be a zero divisor, and so = 0. □ 

Now we can prove Theorem C. 

Proof of Theorem C. Let 

= * An+1 , P ^ = + + ... + ^X*- 1 + B X l 

where Bi G W / n+ i(F) and we can see the variable X as X = (x ,xi, ...,x n ). Indeed Bi 
are polynomials with integer coefficients in the variables (a , a±, a n ), (b , bi, b n ). By 
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Lemma [T] for each monomial BiX l ~ l of \I/ we have that (7 — i)Bi G {p n+1 ), i.e. equal to 
zero. Let v v denote the p-adic valuation of rational integers. Let v p (l — i) = p li where we 
can assume ti > 1 (otherwise Bi = 0). Then we have that Bi G (p n+1 ~ ti ). Also we have 

X ph = (x ,x 1 ,...,x n ) ph = {x^ ,0,0...,0,y j+1 ,y j+2 , ...,y n ) 

= (xg*,0,0...,0) + (0,0,0...,0,y j+ i,y j+2 ,...,y n ) 

where each yi is some polynomial in {xi}i, j is an integer with j > ti and yj+i is in the 
(j + l)-st index. Put u = (xq \ 0, 0..., 0) and it = (0, 0, 0..., 0, yj+i, yj+2, Un)- So we have 

BiX pH = Bi(u + ?r) = 

since 7r G (p 4< ) and B t G (p n+1_ti ). But B { = (0, 0, 0, d iin - ti+l , ...d ijn ) where the first 
possibly nonzero term appears at the (n — ti + l)-st index. Multiplying by u we get 

uBi = (0, 0, ...,0,d i>n - ti+1 x% ,...) 

where any nonzero index is of the form dxQ P + for some nonnegative integer r, and for 
some d G K[{di, Thus $ is of the form 

* = (*o,tfl,...,*n) 

n+1 

where each ^ is an element of K[{a,i, bi}i, Xq ] for i < j. But more than this is true; 
each tyj is linear with respect to aj and bj. This directly follows from the addition and 
multiplication rules of Witt vectors and keeping in mind that characteristic is p. 

_T^— |— 1 

The key ideas here are that each in the above notation is a polynomial in x Q and 

n+1 

for any P = (x ,y ) G E[p n+1 ](K) we have that x^ G K. So choosing an appropriate 
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P = (xo, yo) with x G L n and forcing to satisfy the condition 12. 1[ we obtain an equation 
of the form 

a jaj + Ijbj + 7i = 

where aj, (3j and 7j are polynomials in a^, 6j for z = 0, 1, ...j — 1. But by hypothesis 22 is 
defined over 2^, i.e. do, &o G a ls° existence of the canonical lifting guarantees that this 
equation has a solution probably in K. So we may apply induction: In the case j = 1, by 
hypothesis the above linear equation has coefficients in K and so always have a solution 
a\, hi G K. For the induction step assume that a^, 6j G 2C for z < j — 1. Then we have a 
similar situation; a linear equation in Oj and bj with coefficients in K. We can take any 
cij, bj G 2^ satisfying this linear equation. So we have a Weierstrass model for the canonical 
lifting with a^, 6j G 2T for all i < n. In particular the j-invariant of A n+1 lies in W / n+1 (2T). 
But as n is arbitrary this shows that j n G K for any n > 0. □ 

5 The universal formula 

Now we can use the results of the previous sections to prove Theorem A stated in §1. 
Proof of Theorem A. Let p be any prime number. Recall that we defined the ring R as 

R = F P [J, 1/ J( J - 1728)$ P (J)]. 

We define the elliptic curve E/R as 

E : y 2 + xy = x 3 — 36s/(J - 1728) - l/( J - 1728). 
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Note that j(E) = J and E is ordinary. So the hypotheses of Theorem B is satisfied. With 
the same notation of Theorem B, for any positive integer m we have the elliptic curve E m 
over W m (R') with j-invariant j(E m ) = {j ,ji,j 2 , -,jm)- Now for any j G k ord \ {0, 1728}, 
the homomorphism R' — > ¥ p induced by J i — > jo maps E to an ordinary elliptic curve 
over W p with j-invariant jo, say E. Similarly it maps E m to the canonical lifting of E. Thus 
the proof of (i) is complete once we set ji = fi for all i. 

Now assume p > 5 and let K and K' be the fields of fractions of R and R' respectively. 
Consider the elliptic curve 

E m ® Wm (R>) W m (K') 

obtained via the inclusion W m (R') e — >■ W m (K'). It is a lifting of the generic fiber of E 
denoted by E K i = E <S> R i K' and has a split exact connected- etale sequence over W m (K'). 
So it is the canonical lifting of Ek>- Its j-invariant is in W m (R') as it is obtained from E m . 
But E is indeed defined over K, and since p > 5 it is isomorphic to an elliptic curve 

C : y 2 = x 3 + gx + h 

for some g,h G K. But then Theorem C implies that the j-invariant of the canonical 
lifting of C which is necessarily equal to the j-invariant of E m ®w m {R') W m (K') is indeed 
in W m (K). So each ji £ R' n K = R, and this completes the proof of (ii). 

Now we prove (iii). Since J = = 1728 is supersingular for p = 2,3, we may assume 
that p > 5. Let E be any ordinary elliptic curve over a finite field k with j(E) = jo G k, 
and let E be its canonical lifting over W(k). Then by [SI §V.3] we have that 

End(E) ^ End(E) 
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via the reduction modulo p map. Now take any p such that jo = is an ordinary j-value 
in k = F p . Then the automorphism group of E/W p , say Autg(-E) has order 6. Then by the 
above isomorphism we also have that Aut^E <g> Q p ) has order at least 6. But this can 
happen if and only if j(E) = 0, i.e. in Witt vector notation 6(0) = (0,0,0...). Similarly if 
E/k with j(E) = jo = 1728 is ordinary for some p, then we have that Autg(-E) has order 
4. So that j(E) = 1728, i.e. 0(1728) = (1728,0,0...). □ 
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